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eo*:*><o*e**£»#u i^fitiHS^aiTrf&mfs 

A1*5&i'*-fA. 

[M&gu ] ' iwe*saHMfli#K»i. srseow i d 

•7-^tC*J<tS2|s:A#^^XxA. 
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ti- *«E*]R 0 VTffi&EIMKflc. 
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li . Jf > 7 >f vr«i^ -;UT H U- ^<50 J; -5 iciSSWt-JE 
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ft. £<rc*l*M»S5fc:«SSE-fc 3#tg^$ft£. 
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>^su-9m 1 t aia^€lM*£18XlM»tf5 fcfl-L 
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^^afi^Jffll^XT-A 13 1. *A6l!fW^^f-A 1 3 3 
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fU Xfy7*S2 3T'*A^5mtB£^ii-g-<i. tf 
2*ft*Xbziy\?*.-? l 5«i^S^i7*^/S«<3yb* 
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(Xf 77S3 7 ) . 
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[0044] &K08£#FILT. ^BBMr -f y^/HI 

fcW&mt. ITU-TX. 5 0'9T'«^$ilT^l.iI 
aflftS) 0 , Ji*»^>IHtC ^Version Numbe 
r ; m^m^-i^B y (V 1 ; , V2 : . V3 ; ) j 
""Serial Number; SEBftgcO^ 'J T)V^ 
-Sf- j ri SS uer Name; iPJfgcOSglTJljOff 
fgj f Va 1 i d i ty : fJBJW^^ggiEj r Su b 
j e c t Name; H9» ASE 1 !]!-*- 4 <0fi|?g j 
rpublic K e y ; £g8S<9W?8j r Ext en 
s i o n s ; t£3§Tg$J ^Digital Signa 
t u r e : x-f ( ftg&SKf-x 7ffl> j 

IStS^itS . Zf>.^<r>f^.Z\ r Seriai Numb 
erjfcr Subject Namejli f£fr^#S 

[0045] *|g»©(cfeV^TJi. 
-§■£1 DfcLTaEBWS-^ff-rS^C Ztit> r Se 
rial Numberj t f Subj ect Nam 
ej C0^mi\ ^tePtfrfriWII D («fg#-^) £ 

[0 04 6] 8«C. 09*3^01 0£#K?LT\ #A 

0T'£> <0 , 0 1 0 tm t < W^^^K¥f^rr-9^ 
[0047] ±~¥, 095r#ro-rsc flifW<V3 

hP^/SiSnVti-^jBi^r^-tx-r^^tc. # 
^•-b'^ftft^t i,x<n. 'nwrnm ■ mm. 2 ran* 

Sl# (ISP (Internet Service P 
r o v i d e r ) ^<0I< vb^&yovW ^r) , A—.^ 

/i^ 3 &HnamB8 (*-F*it, s&fT&tfiBM 

DIP) w-ftik9Ugtti>frtfMIRZti&. 

[0048] mm%& : y 3 e j/^hkl* 

;ti)fcici±A-f^/3 7 7C, jo^yy^'ute 

MSrtTi5 3t-fl»^-C(±fi : iS^ra-f5^- J>9- 
*y h&mZ'nti ok-tZtg-Slzte I S Ptc-eVi-f <17 
^-t^-r^,. ZCDtZT7-1zXii'£xms2&-%Xl7£)tl 
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* & 1HS* WI -fe y 9 tc*t L T # A £ t#J£f -I. fc Wco 
!2liE • -5-fIIBJi ft -3 . Wl-fc 
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mm&^mmM^ . i^-^tki-x, url 

[005 1 ] A7J$^m^#^*V^T-^^-Xts 
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LT{i1^^-^TKU^., URL5, A'-f+;^ 3 
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it. mmztTm. jtm^y^^-^m^mmmm^'ii 

0Zk£ft®fr&ra7'y^X'$>&. 

[0057] ( 3 ) t -f ^yufE^Sffitfr^^T-x. t ^ 

hnyti-?) <nmz-£MZi\tz?y*: 3.-9 ksrm 
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PROBLEM TO BE SOLVED: To provide a user _ 
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networks according to the credit information. 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 
[Claim(s)] 

[Claim 1] the user of the concerned network on a network — him in the network 
characterized by performing his specialization by the telephone number from the 
communication terminal connected to the concerned network — specific technique 
[Ciaim 2] the base [ ID / identification / by the telephone number from the communication 
terminal connected to a public network ] — the user of the concerned public network — him 
in the network characterized by to have a connection control means forms the credit data for 
he specialization, is established between the telephone number management tool which 
outputs these credit data, and the aforementioned public network and a computer network, 
and control the connection between these networks according to the aforementioned credit • 
data — a specific system 

[Claim 3] him in the network according to claim 2 characterized by the aforementioned 
identification ID being either of the telephone numbers checked by calling back on the basis 
of the telephone number notified from a public network, or the telephone number notified from 
the communication terminal — a specific system 

[Claim 4] the aforementioned telephone number management tool — the base [ ID / 
identification / aforementioned ] — him — him who judges a sex — him in the network 
according to claim 2 characterized by having a specific means and a certificate issue means 
to publish a certificate according to this notice from a he specialization means — a specific 
system 

[Claim 5] him in the network according to claim 2 or 4 characterized by equipping the 
aforementioned telephone number management tool with the database which is made to 
correspond to the aforementioned identification ID and stores any one of a name, the address, 
a card number, and the e-mail addresses at least — a specific system 
[Claim 6] the user of the concerned network on a network — him in the network 
characterized by performing his specialization by the telephone number from the 
communication terminal connected to the concerned network — the record medium which 
recorded the specific program and in which computer reading is possible 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3.ln the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001]- 

[The technical field to which invention belongs] him in the network which enables it to specify 
that this invention is him in whom the communications partner on a network exists in actual 
society — specific technique and a system, and him — it is related with the record medium 
which recorded the specific program 
[0002] 

[Description of the Prior Art] As an identification ID for specifying a communications partner 
until now For example, what was virtually set as the computer screen oversize like the mail 
address with the internet network is used. The case where it asks for a presentation of 
register copy, a copy of a family register, a license, etc., etc. individually ofHine according to 
the status is removed. Performing authentication it being difficult to specify only on-line him 
who exists really, and positive about whether the partner who is communicating further exists 
on actual society was not performed. 

[0003] Moreover, since the computer network and the public network are using the 
completely different communication procedure, the identification meanses of a screen 
oversize also differed, therefore fusion nature and compatibility were deficient in both 
network, and the public network has been used only as a communication wire of mere axle 
part 

[0004] Moreover, the key which uses in order to communicate an information safely with a 
computer network, and is used for an encryption in a **** public key cryptosystem differs 
from the key used for decode, a communicating agency is enciphered using the exhibited key 
which the communication place which is a communications partner owns, and the 
communication place is made to carry out the decode of the cipher with the private key held 
by himself. Therefore, the digital certificate for the owner of the public key which the 
communications partner exhibits proving that it is a true communications partner was needed. 

[0005] 

[Problem(s) to be Solved by the Invention] However, on-line as an identification ID for 
connecting a public key and its owner conventionally, what was virtually set as the broaden 
based computer screen oversize like the mail address had to be used. Therefore, if the case 
where it asked for a presentation of register copy, a copy of a family register, a license, etc., 
etc. off-line according to the status was removed, the proof did not reach about the owner of 
the key which exists really. That is, although the information leak, the alteration, etc. under 
communication could be prevented by adopting cryptocommunication, it was not able to be 
proved about whether the partner who is communicating exists on actual society. 
[0006] Moreover, in connecting with broader-based computer networks, such as an internet 
network, using a public network, in order to prove whether you are the computer user who can 
connect by inputting identification ID and a password from a computer, performing 
authentication positive about whether he who exists really exists in actual society truly was 
not performed, and it was not able to be performed, either. 

[0007] that by which this invention was made in view of the above-mentioned technical 



http:/ / www4.ipdljpo.gojp/cgi-bin/tran_web_cgi_ejje 



2002/04/25 



2/7 s<—i> 



probrem — it is — the user of a network — him in the network which can attest his 
specialization on-line — specific technique and a system, and him — it aims at offering the 
record medium which recorded the specific program 
[0008] 

[Means for Solving the Problem] the user of the concerned network [ invention / according to 
claim 1 ] on a network in this invention in order to attain the purpose mentioned above — let 
it be a summary to perform his specialization by the telephone number from the 
communication terminal connected to the concerned network 

[0009] the base [ ID / identification / by the telephone number from the communication 
terminal by which invention according to claim 2 is connected to a public network ] — the 
user of the concerned public network — the credit data for he specialization are formed, and 
it is prepared between the telephone number management tool which outputs these credit 
data, and the aforementioned public network and a computer network, and let it be a summary 
to have a connection control means to control the connection between these networks 
according to the aforementioned credit data 

[0010] Invention according to claim 3 makes it a summary to have that identification ID of the 
claim 2 aforementioned publication is either of the telephone numbers checked by calling back 
on the basis of the telephone number notified from a public network, or the telephone number 
notified from the communication terminal. 

[0011] invention according to claim 4 — the telephone number management tool of the claim 
2 aforementioned publication — the base [ ID / identification / aforementioned ] — him — 
him who judges a sex — let it be a summary to have a specific means and a certificate issue 
means to publish a certificate according to this notice from a he specialization means 
[0012] Invention according to claim 5 makes it a summary to have the database which the 
aforementioned claim 2 or a telephone number management tool given in four is made to 
correspond to the aforementioned identification ID, and stores any one of a name, the 
address, a card number, and the e-mail addresses at least. 

[0013] the user of the concerned network [ record medium / which invention according to 
claim 6 can computer read ] on a network — him in the network characterized by performing 
his specialization by the telephone number from the communication terminal connected to the 
concerned network — let it be a summary to have recorded the specific program 
[0014] 

[Embodiments of the Invention] Hereafter, the gestalt of operation of this invention is 
explained using a drawing. 

[0015] Drawing 1 is a block diagram showing the configuration of the outline of a system in 
which this invention is applied. In drawing 1 , a communication terminal 9 is connected with 
the broader-based computer networks 1, such as internet, through a public network 7. 
Moreover, the connection control section 5 is formed between a public network 7 and the 
broader-based computer network 1 , and the authentication center 3 is connected to this 
connection control section 5. 

[0016] moreover, on the basis of [ the telecommunications control system 31 with which the 
authentication center 3 performs communications control between a public network 7 and the 
broader-based computer network 1 through the connection control section 5, and on the 
basis of identification ID by the telephone number from the communication terminal 9 which 
connects with a public network 7 ] — him — him who judges a sex and specifies him — him 
who is notified from a control system 33 and this he control system 33 — it is constituted by 
the certificate issue system 35 which publishes a certificate on the basis of a sexual collating 
result 

[0017] Moreover, the connection control section 5 controls the connection between the 
broader-based computer network 1 and the public network 7 according to control designation 
of the communications control section 31 of the authentication center 3. 
[0018] In addition, a network shall be constituted by the line network containing a public 
network 7 and the broader-based computer network 1, and a public network 7 shall be a 
network which contains data communication networks, such as a packet switched network, 
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and ISDN, including a telephone network. Moreover, as telephone number inputted from a 
communication terminal 9, # and * which are arranged by the telephone of a usual push type 
besides 1,2,- and 9 and 0 can also be used suitably. 

[0019] Next the case where it connects with the broader-based computer network 1 through 
a public network 7 is explained to an example about an operation of this operation gestalt 
[0020] First it dials by the 'communication terminals 9, such as a modem and TA (Terminal 
Adapter), and connects with the connection control sections 5, such as the host computer 
with a modem 1 5 (or communications control devices, such as a dial-up router) connected to 
the network via the telephone line, him who set an addresser s telephone number to 
identification ID which mentions acquisition and this telephone number later by the side which 
receives connection by the notice service of an addresser number of notifying an addressers 
telephone number to an action addressee before telephone call start in a public network 7 — 
a specific information database — reference — applying — him — specific authentication is 
performed 

[0021] In addition, by the basic service of ISDN service or a cellular-phone service, and the 
analog call service, you may use the telephone number checked by calling back on the basis 
of the telephone number notified not only from the telephone number notified from the public, 
network 7 by the caller ID service which notifies the telephone number of the origination side 
which is an addition function to a destination side before communication start but from the 
communication terminal in this way at this time. 

[0022] Furthermore, after performing he specialization authentication, before [ the broader- 
based computer network 1 ] telephone communication connection establishes authorization . 
and refusal of connection, it carries out Moreover, when publishing a digital certificate, a 
certificate issue demand is performed after the completion of authentication, using an 
addressers telephone number as identification ID to the certificate issue system 35, and 
issue of the digital certificate of a public key is received. 

[0023] Next, with reference to drawing 2 , this structure of a system is explained in detail. In 
drawing 2 , the computer with a modem 19 as a communication terminal is connected with the 
broader-based computer network 1 through a public network 7. Moreover, between a public 
network 7 and the broader-based computer network 1, the host computer with a modem 15 
as a connection control section (or communications control devices, such as a dial-up router) 
is formed, arid the authentication center 13 is connected to this host computer with a modem 
1 5. In addition, two or more arbitrary communication terminals are suitably connected to a 
public network 7. 

[0024] moreover, the public network-wide area computer network telecommunications control 
system 131 and him who show in drawing 2 — the telecommunications control system 31 and 
him who show the control system 133 and the digital certificate issue system 135 in drawing 1 
— it is prepared in the authentication center 13 respectively corresponding to the control 
system 33 and the certificate issue system 35 

[0025] The public network-wide area computer network telecommunications control system 
131 performs communications control between a public network 7 and the broader-based 
computer network 1 through the host computer with a modem 15. moreover, him — a control 
system 133 stores a supplementary program (1), (2), (3), (4), and (5) thereby — him — the 
base [ ID / identification / by the telephone number from the communication terminal 9 
connected to a public network 7 when a control system 133 performs this supplementary 
program (1), - and (5) ] — him — a sex is judged and he is specified Moreover, these 
supplementary program (1), - and (5) are adjusted by the transaction managerial system 137. 
[0026] the digital certificate issue system 135 — him — him who is notified from a control 
system 133 — a digital certificate as credit data which is shown in the drawing 8 later 
mentioned on the basis of a sexual collating result is published 
[0027] Furthermore, a database 139 is formed in the authentication center 3, and 
identification ID data 139a by the telephone number, he specialization data 139b, and 
identification ID conversion data 139c are stored in this database 139. 
[0028] the data for identification ID data 139a being data by the telephone number, and he 
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specialization data 139b performing his. specialization from the addresser telephone number 
by the side of the call origination transmitted along with the action-addressee telephone 
number by the side of a call in — it is — identification ID conversion data 139c — the 
telephone number — him — it is data which have a table for changing into the data (for 
example, account number) corresponding to the specific reference 

[0029] Moreover, the identification ID communication buffering system 151 is formed in the 
host computer with a modem 15. This identification ID communication buffering system 151 is 
a buffer for taking matching between the public network 7 of transmission-speed regularity, 
and the broader-based computer network 1 of a transmission-speed indeterminate. 
[0030] Hereafter, with reference to the drawing 3 or the drawing 7 , an operation of this 
operation gestalt is explained in detail. 

[0031] Here, the computer with a modem 19 is used, it accesses to a public network 7, and 
the case where it connects with the broader-based computer network 1 is explained. 
[0032]Tirst, the host computer with a modem 15 is telephoned from the computer with a 
modem 1 9, and telephone communication connection is made. A public network 7 notifies the 
telephone number (addresser telephone number) of the telephone line which the computer 
with a modem 19 used for dispatch, before performing arrival of the mail to the host computer 
with a modem 15 (step S11). 

[0033] if the addresser telephone number is notified at step S13 — the host computer with a 
modem 15 — this notified addresser telephone number — the public network-wide area 
computer network telecommunications control system 131 — minding — him — the specific 
system 133 js passed The he specialization system 133 starts the supplementary program (1) 
shown in drawing 3 , or (5). 

[0034] the existence of the data which supplementary program (1) set, set the telephone 
number to identification ID, perform an inquiry in a database 139 (step S15), set the received 
telephone number to identification ID, search he specialization data 1 39b, and agree — 
checking — him — specific authentication is performed (step SI 7) While the authentication 
result is saved to a database 139, it is passed to a supplementary program (2) (step S19). 
[0035] the supplementary program (2) shown in drawing 4 — setting — this authentication 
result — a supplementary program (1) **** — receiving (step S21) — additional informations 
(password etc.) are received from the computer with a modem 19, and it stores in a database 
139 It is connectable with this database 139, and also you may use these informations from a 
program and a system. 

[0036] moreover, when performing communications control to the broader-based computer 
network 1, an authentication result passes the public network-wide area computer network 
telecommunications control system 131 from a supplementary program (2) — having — step 
S23 — him — in a specific authentication success, the host computer with a modem 15 
permits the communication to the broader-based computer network 1 from a public network 
7, it progresses to step S27, and the connection refusal of the case of an authentication 
failure is progressed and carried out to step S25 

[0037] On the other hand, when the communication to the broader-based computer network 1 
is permitted from a public network 7 in step S23, the address and the host name which are 
identification ID used with the broader-based computer network 1 are given from the host 
computer with a modem 15. 

[0038] The given informations, such as the address and a host name, are stored in the 
database 139 related with the telephone number by the supplementary program (2) (step 
S29). 

[0039] Conversion is performed, when reference is performed by identification ID, or the 
address and a host name to a database (step S43) and these data have conversion data by 
the supplementary program (4) shown in drawing 6 (step S4). 

[0040] In the two way communication of the broader-based computer network 1 and the 
public network 7, communication data are buffered by the identification ID communication 
buffering system 151, and when it is the communication procedure to which the band on the 
broader-based computer network 1 is not guaranteed, a difference of the communication 
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procedure with a public network 7 is absorbed. 

[0041] When transmitting and receiving by dividing especially the datagram of a fixed length, it 
supplementary program [ which ic shown in drawing 7 ] (5) Sets, and telephone communication 
connection is supervised (step S51), in addition to buffering, a temporary store is performed, 
and delivery of fixed-length datagram is secured irrespective of the existence of telephone 
communication connection.' 

[0042] moreover, him according [ when publishing a digital certificate on the basis of 
identification ID, an authentication result and identification ID are passed to the 
supplementary program (3) shown in drawing 5 from a supplementary program (1) (step S31), 
and / a supplementary program (3) ] to identification ID — when having succeeded in specific 
authentication, a certificate issue demand is performed on the basis of identification ID to 
(step S33) digital certificate issue system 135 (step S35) 

[0043] The information on identification ID is stored in "Serial Number" or "Subject Name" of 
the published digital certificate, and it is transmitted to the computer with a modem 19 by the 
supplementary program (3) (step S37). 

[0044] Next, an example of a public-key digital certificate is explained with reference to 
drawing 8 . The public-key digital certificate shown in this drawing 8 is a certificate specified . 
in nrU-T X.509. Version the order from a top "Serial version (VI V2;, V3;) of Number; 
certificate "Issuer serial number of Number certificate Subject the information on the issue 
office of Name; certificate", and "the term of validity of Validity; certificate""" "Public an 
users information which Name; certificate proves "Digital the information on Key; public key", 
and "Extensions; extension field" A Signature; digital signature (for a content alteration 
check)" is indicated." Among these, "Serial Number" and "Subject Name" are unique for 
every certificate which an issue office defines. 

[0045] That is, in this operation gestalt, when publishing a certificate, using the telephone 
number as ID, it is possible to use these "Serial Number", "Subject Name", or both as an 
identification ID (telephone number). 

[0046] next, him by the telephone number at the time of using the service with the need of 
specifying him, with reference to the drawing 9 and the drawing 10 — specialization is 
explained more concretely drawing 9 — the telephone number — him — drawing for 
explaining the authentication and **** at the time of specifying — it is — drawing 10 — the 
same — him.of the telephone number — it is drawing for explaining conversion to specific 
data 

[0047] First, in case communication terminals, such as a users personal computer, access 
the broader-based computer networks 1, such as an internet network, by the cable or the 
radio with reference to drawing 9 , it is chosen with any of administrative body and public 
office, two sort communication entrepreneur (so-called **********s, such as ISP (Internet 
Service Provider)), virtual shop, and financial relation engines (a card issuer, a bank, post 
office, etc.) it connects. [ as each service provider ] 

[0048] That is, when a user wants to enjoy shopping, a virtual shop is accessed at ISP, 
respectively, when it is going to perform an Internet connectivity at an administrative body 
and a public office, when it is going to perform banking and it is going to perform perusal and 
change of a residents information to a financial relation engine. At this time, all accesses are 
performed by the telephone number. 

[0049] For example, when it connects with the broader-based computer network 1 through 
the functioning telephone number management center and it buys as an authentication center 
at a virtual shop using the so-called credit card, a virtual shop and a card issuer perform the 
authentication and the **** inquiry for specifying him to the telephone number management 
center which is an authentication vicarious execution service engine, using the telephone 
number as ID. In addition, NTT as a telephone number management center which can usually 
offer an authentication vicarious execution service, and other telephone entrepreneurs 
become an object. 

[0050] next, him who is data for specifying him in the telephone number management center 
with reference to drawing 10 — specific data and the identification ID data by the telephone 
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number are made to correspond, and it is accumulating in the database As this he 
specialization data, his name and the address, the card number for every card issuer, the 
account number for every bank and post office, the license number of c license, the insurance 
certificate number for every policy, an e-mail address, and URL (home address) are 
accumulated. 

[0051] him who is accumulated from the inputted telephone number at a database — with 
reference to specific data, the account number is notified [ a license number and an 
insurance certificate number / an e-mail address and URL / his name and the address ] for a 
card number to a bank to a card issuer to a virtual shop to ISP to an administrative body or a 
public office, respectively 

[0052] Here, a telephone number management center notifies the pulling-down wording of a 
telegram and card number of the amount of money which bought the data applied to dispatch 
of goods, such as his name and the address, and the telephone number, to a virtual shop to 
the card issuer, and, thereby, ****s them. 

[0053] such him — specialization — him — a specific program is realized, and by computer, 
this program is recorded on the record medium which can be read, and is offered widely 
[0054] the following and him — a specific program is explained concretely 
[0055] (1) an arrival-of-the-mail device to the addresser telephone number which is a 
processing program on the computer installed between the arrival-ofHhe-mail devices (a 
dial-up router or host computer with a modem) which can receive the addresser telephone 
number connected with the digital certificate issue system at the public network, and can 
receive the addresser telephone number — receiving — the addresser telephone number — . 
an identification ID — carrying out — him — it is the program characterized by to ask a 
specific-information database and to control a series of transactions, such as an 
authentication success and a failure 

[0056] (2) It is a processing program on the computer installed between the arrival-of-the- 
mail devices (a dial-up router or host computer with a modem) which can receive the 
addresser telephone number connected with the digital certificate issue system at the public 
network, and ask a database, receiving the addresser telephone number from the arrival-of- 
the-mail device which can receive the addresser telephone number, and using the addresser 
telephone number as identification ID, and it is the program characterized by to perform the 
connection control to a broader^based computer network after the completion of 
authentication. . 

[0057] (3) It is a processing program on the computer installed between the arrival-of-the- 
mail devices (a dial-up router or host computer with a modem) which can receive the 
addresser telephone number connected with the digital certificate issue system at the public 
network, and it is the program which receives the addresser telephone number from the 
arrival-of-the-mail device which can receive the addresser telephone number, sets the 
addresser telephone number to an identification ID, and is characterized by to control a series 
of transaction which asks a database and performs an issue demand to public-key digital 
certificate issue application. 

[0058] (4) a basis [ information / which relates the telephone number with the address or a 
host name, and was stored in the database ] — identification ID conversion of a broader- 
based computer network and a public network — carrying out — him — they are specific 
authentication and the program characterized by performing communications control 
[0059] (5) It is the program characterized by supervising the communication with the broader- 
based computer network and public network by identification ID conversion, and accumulating 
communication data to buffering or external storage by the existence of telephone 
connection. 

[0060] As mentioned above, according to this operation gestalt, the compatibility and the 
fusion nature of a broader-based computer network and a public network from which the 
connection with the actual society which exists really in the information communication with 
a broader-based computer screen oversize and online is offered, and a communication 
procedure is different can be raised. 
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[0061] That is, in the public key cryptosystem currently used in order to become, to manage a 
broadeHaased computer network and to prevent j n case the owner of the public 

key used as a communicative subject and connection of a public key are guaranteed with a 
digital certificate, it is enabled to specify the owner of a public key as what exists in actual 
society. 

[0062] moreover, about ther communication which needs to apply the encryption with a high 
intensity Although it must be able to attest and prove that a communications partner exists 
in actual society with a natural thing, even if it is in such a case It is enabled to perform 
authentication and proof on-line the convenience of a broader-based computer network, and 
instancy taking advantage of a sex, without performing a prior presentation of the certificate 
which is valid in actual society, such as register copy and a license, about the information 
about the owner of a public key who proves with a digital certificate. 
[0063] Fusion of the public network which is the axle part on the communication which 
furthermore spreads to each home, and a broader-based computer network is raised, and it 
contributes to development of an information communication field. 
[0064] 

[Effect of the Invention] According to the technique by this invention, as explained above, -by . 
public-key-encryption-ized communication of a broader-based computer screen oversize, it 
becomes possible [ attesting and proving ] for the owner of a public key to exist actually as a 
circuit contractor, and a reliability and safety can be indispensable and can communicate the 
important content now. Moreover, fusion of a public network and a broader-based computer 
network becomes easy by controlling connection, using the telephone number as identification 
ID. 



[Translation done.] 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



TECHNICAL FIELD 

[The technical field to which invention belongs] him in the network which enables it to specify 
that this invention is him in whom the communications partner on a network exists in actual 
society — specific technique and a system, and him — it is related with the record medium 
which recorded the specific program 
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PRIOR ART 

[Description of the Prior Art] As an identification ID for specifying a communications partner 
until now For example, what was virtually set as the computer screen oversize like the mail 
address with the internet network is used. The case where it asks for a presentation of 
register copy, a copy of a family register, a license, etc., etc. individually off-line according to 
the status is removed. Performing authentication it being difficult to specify only onHine him 
who exists really, and positive about whether the partner who is communicating further exists 
on actual society was not performed. 

[0003] Moreover, since the computer network and the public network are using the 
completely different communication procedure, the identification meanses of a screen 
oversize also differed, therefore fusion nature and compatibility were deficient in both 
network, and the public network has been used only as a communication wire of mere axle 
part. 

[0004] Moreover, the key which uses in order to communicate an information safely with a 
computer network, and is used for an encryption in a **** public key cryptosystem differs 
from the key used for decode, a communicating agency is enciphered using the exhibited key 
which the communication place which is a communications partner owns, and the 
communication place is made to carry out the decode of the cipher with the private key held 
by himself. Therefore, the digital certificate for the owner of the public key which the 
communications partner exhibits proving that it is a true communications partner was needed. 
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EFFECT OF THE INVENTION 

[Effect of the Invention] According to the technique by this invention, as explained above, by 
public-key-encryption-ized communication of a broader^based computer screen oversize, it 
becomes possible [ attesting and proving ] for the owner of a public key to exist actually as a 
circuit contractor, and a reliability and safety can be indispensable and can communicate the 
important content now. Moreover, fusion of a public network and a broader-based computer 
network becomes easy by controlling connection, using the telephone number as identification 
ID. 
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TECHNICAL PROBLEM 

[Problem(s) to be Solved by the Invention] However, on-line as an identification ID for 
connecting a public key and its owner conventionally, what was virtually set as the broader- 
based computer screen oversize like the mail address had to be used. Therefore, if the case 
where it asked for a presentation of register copy, a copy of a family register, a license, etc., 
etc. off-line according to the status was removed, the proof did not reach about the owner of 
the key which exists really. That is, although the information leak, the alteration, etc. under 
communication could be prevented by adopting cryptocommunication, it was not able to be 
proved about whether the partner who is communicating exists on actual society. 
[0006] Moreover, in connecting with broader-based computer networks, such as an internet 
network, using a public network, in order to prove whether you are the computer user who can 
connect by inputting identification ID and a password from a computer, performing 
authentication positive about whether he who exists really exists in actual society truly was 
not performed, and it was not able to be performed, either. 

[0007] that by which this invention was made in view of the above-mentioned technical 
probrem — it is — the user of a network — him in the network which can attest his 
specialization on-line — specific technique and a system, and him — it aims at offering the 
record medium which recorded the specific program 
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MEANS 

[Means for Solving the Problem] the user of the concerned network [ invention / according to 
claim 1- ] on a network in this invention in order to attain the purpose mentioned above — let 
it be a summary to perform his specialization by the telephone number from the 
communication terminal connected to the concerned network 

[0009] the base [ ID / identification / by the telephone number from the communication 
terminal by which invention according to claim 2 is connected to a public network ] — the 
user of the concerned public network — the credit data for he specialization are formed, and 
it is prepared between the telephone number management tool which outputs these credit 
data, and the aforementioned public network and a computer network, and let it be a summary 
to have a connection control means to control the connection between these networks 
according to the aforementioned credit data 

[0010] Invention according to claim 3 makes it a summary to have that identification ID of the 
claim 2 aforementioned publication is either of the telephone numbers checked by calling back 
on the basis of the telephone number notified from a public network, or the telephone number 
notified from the communication terminal. 

[001 1] invention according to claim 4 — the telephone number management tool of the claim 
2 aforementioned publication — the base [ ID / identification / aforementioned ] — him — 
him who judges a sex — let it be a summary to have a specific means and a certificate issue 
means to publish a certificate according to this notice from a he specialization means 
[0012] Invention according to claim 5 makes it a summary to have the database which the 
aforementioned claim 2 or a telephone number management tool given in four is made to 
correspond to the aforementioned identification ID, and stores any one of a name, the 
address, a card number, and the e-mail addresses at least. 

[0013] the user of the concerned network [ record medium / which invention according to 
claim 6 can computer read ] on a network — him in the network characterized by performing 
his specialization by the telephone number from the communication terminal connected to the 
concerned network — let it be a summary to have recorded the specific program 
[0014] 

[Embodiments of the Invention] Hereafter, the gestalt of operation of this invention is 
explained using a drawing. 

[0015] Drawing 1 is a block diagram showing the configuration of the outline of a system in 
which this invention is applied. In drawing 1 , a communication terminal 9 is connected with 
the broader^based computer networks 1, such as internet, through a public network 7. 
Moreover, the connection control section 5 is formed between a public network 7 and the 
broader-based computer network 1, and the authentication center 3 is connected to this 
connection control section 5. 

[0016] moreover, on the basis of [ the telecommunications control system 31 with which the 
authentication center 3 performs communications control between a public network 7 and the 
broadeiHjased computer network 1 through the connection control section 5, and on the 
basis of identification ID by the telephone number from the communication terminal 9 which 
connects with a public network 7 ] — him — him who judges a sex and specifies him — him 
who is notified from a control system 33 and this he control system 33 — it is constituted by 
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the certificate issue system 35 which publishes a certificate on the basis of a sexual collating 
result 

[0017] Moreover, the connection control section 5 controls the connection between the 
broader-based computer network 1 and the public network 7 according to control designation 
of the communications control section 31 of the authentication center 3. 
[0018] In addition, a network shall be constituted by the line network containing a public 
network 7 and the broader-based computer network 1, and a public network 7 shall be a 
network which contains data communication networks, such as a packet switched network, 
and ISDN, including a telephone network. Moreover, as telephone number inputted from a 
communication terminal 9, # and * which are arranged by the telephone of a usual push type 
besides 1, 2, - and 9 and 0 can also be used suitably. 

[0019] Next, the case where it connects with the broader-based computer network 1 through 
a public network 7 is explained to an example about an operation of this operation gestalt. 
[0020] "First, it dials by the communication terminals 9, such as a modem and TA (Terminal 
Adapter), and connects with the connection control sections 5, such as the host computer 
with a modem 15 (or communications control devices, such as a dial-up router) connected to 
the network via the telephone line, him who set an addresser's telephone number to 
identification ID which mentions acquisition and this telephone number later by the side which 
receives connection by the notice service of an addresser number of notifying an addresser's 
telephone number to an action addressee before telephone call start in a public network 7 — 
a specific information database — reference — applying — him — specific authentication is 
performed . 

[0021] In addition, by the basic service of ISDN service or a cellular-phone service, and the 
analog call service, you may use the telephone number checked by calling back on the basis 
of the telephone number notified not only from the telephone number notified from the public 
network 7 by the caller ID service which notifies the telephone number of the origination side 
which is an addition function to a destination side before communication start but from the 
communication terminal in this way at this time. 

[0022] Furthermore, after performing he specialization authentication, before [ the broader- 
based computer network 1 ] telephone communication connection establishes authorization 
and refusal of connection, it carries out. Moreover, when publishing a digital certificate, a 
certificate issue demand is performed after the completion of authentication, using an 
addresser s telephone number as identification ID to the certificate issue system 35, and 
issue of the digital certificate of a public key is received. 

[0023] Next, with reference to drawing 2 , this structure of a system is explained in detail. In 
drawing 2 , the computer with a modem 1 9 as a communication terminal is connected with the 
broader-based computer network 1 through a public network 7. Moreover, between a public 
network 7 and the broader-based computer network 1, the host computer with a modem 15 
as a connection control section (or communications control devices, such as a dial-up router) 
is formed, and the authentication center 13 is connected to this host computer with a modem 
15. In addition, two or more arbitrary communication terminals are suitably connected to a 
public network 7. 

[0024] moreover, the public network-wide area computer network telecommunications control 
system 131 and him who show in drawing 2 — the telecommunications control system 31 and 
him who show the control system 133 and the digital certificate issue system 135 in drawing 1 
— it is prepared in the authentication center 13 respectively corresponding to the control 
system 33 and the certificate issue system 35 

[0025] The public network-wide area computer network telecommunications control system 
131 performs communications control between a public network 7 and the broader-based 
computer network 1 through the host computer with a modem 1 5. moreover, him — a control 
system 133 stores a supplementary program (1), (2), (3), (4), and (5) thereby — him — the 
base [ ID / identification / by the telephone number from the communication terminal 9 
connected to a public network 7 when a control system 133 performs this supplementary 
program (1), -, and (5) ] — him — a sex is judged and he is specified Moreover, these 
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supplementary program (1), - and (5) are adjusted by the transaction managerial system 137. 
[0026] the digital certificate issue system 135 — him — him who is notified from a control 
system 133 — a digital certificate as credit data which is shown in the drawing 8 later 
mentioned on the basis of a sexual collating result is published 
[0027] Furthermore, a database 139 is formed in the authentication center 3, and 
identification ID data 139a by the telephone number, he specialization data 139b, and 
identification ID conversion data 139c are stored in this database 139. 
[0028] the data for identification ID data 139a being data by the telephone number, and he 
specialization data 139b performing his specialization from the addresser telephone number 
by the side of the call origination transmitted along with the action-addressee telephone 
number by the side of a call in — it is — identification ID conversion data 139c — the 
telephone number — him — it is data which have a table for changing into the data (for 
example, account number) corresponding to the specific reference 

[0029] Moreover, the identification ID communication buffering system 151 is formed in the 
host computer with a modem 15. This identification ID communication buffering system 151 is 
a buffer for taking matching between the public network 7 of transmission-speed regularity, 
and the broader-based computer network 1 of a transmission-speed indeterminate. 
[0030] Hereafter, with reference to the drawing 3 or the drawing 7 , an operation of this 
operation gestalt is explained in detail. 

[0031] Here, the computer with a modem 19 is used, it accesses to a public network 7, and 
the case where it connects with the broader-based computer network 1 is explained. 
[0032] First, the host computer with a modem 15 is telephoned from the computer with a 
modem 19, and telephone communication connection is made. A public network 7 notifies the 
telephone number (addresser telephone number) of the telephone line which the computer 
with a modem 19 used for dispatch, before performing arrival of the mail to the host computer 
with a modem 15 (step S11). 

[0033] if the addresser telephone number is notified at step S13 — the host computer with a 
modem 15 — this notified addresser telephone number — the public network-wide area 
computer network telecommunications control system 131 — minding — him — the specific 
system 133 is passed The he specialization system 133 starts the supplementary program (1) 
shown in drawing 3 , or (5). 

[0034] the existence of the data which supplementary program (1) set, set the telephone 
number to identification ID, perform an inquiry in a database 139 (step S15), set the received 
telephone number to identification ID, search he specialization data 139b, and agree — 
checking — him — specific authentication is performed (step S17) While the authentication 
result is saved to a database 139, it is passed to a supplementary program (2) (step S19). 
[0035] the supplementary program (2) shown in drawing 4 — setting — this authentication 
result — a supplementary program (1) **** — receiving (step S21) — additional informations 
(password etc.) are received from the computer with a modem 19, and it stores in a database 
139 It is connectable with this database 139, and also you may use these informations from a 
program and a system. 

[0036] moreover, when performing communications control to the broader-based computer 
network 1, an authentication result passes the public network-wide area computer network 
telecommunications control system 131 from a supplementary program (2) — having — step 
S23 — him — in a specific authentication success, the host computer with a modem 15 
permits the communication to the broader-based computer network 1 from a public network 
7, it progresses to step S27, and the connection refusal of the case of an authentication 
failure is progressed and carried out to step S25 

[0037] On the other hand, when the communication to the broader-based computer network 1 
is permitted from a public network 7 in step S23, the address and the host name which are 
identification ID used with the broader-based computer network 1 are given from the host 
computer with a modem 15. 

[0038] The given informations, such as the address and a host name, are stored in the 
database 139 related with the telephone number by the supplementary program (2) (step 
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S29). 

[0039] Conversion is performed, when reference is performed by identification ID, or the 
address and a host name to a database (step S43) and these data have conversion data by 
the supplementary program (4) shown in drawing 6 (step S4). 

[0040] In the two way communication of the broader-based computer network 1 and the 
public network 7 f communication data are buffered by the identification ID communication 
buffering system 151, and when it is the communication procedure to which the band on the 
broader-based computer network 1 is not guaranteed, a difference of the communication 
procedure with a public network 7 is absorbed. 

[0041] When transmitting and receiving by dividing especially the datagram of a fixed length, it 
supplementary program [ which is shown in drawing 7 ] (5) Sets, and telephone communication 
connection is supervised (step S51), in addition to buffering, a temporary store is performed, 
and delivery of fixed-length datagram is secured irrespective of the existence of telephone 
communication connection. 

[0042] moreover, him according [ when publishing a digital certificate on the basis of 
identification ID, an authentication result and identification ID are passed to the 
supplementary' program (3) shown in drawing 5 from a supplementary program (1) (step S31), . 
and / a supplementary program (3) ] to identification ID — when having succeeded in specific 
authentication, a certificate issue demand is performed on the basis of identification ID to 
(step S33) digital certificate issue system 135 (step S35) 

[0043] The information on identification ID is stored in "Serial Number" or "Subject Name" of 
the published digital certificate, and it is transmitted to the computer with a modem 19 by the 
supplementary program (3) (step S37). 

[0044] Next, an example of a public-key digital certificate is explained with reference to 
drawing 8 . The public-key digital certificate shown in this drawing 8 is a certificate specified 
in ITU-T X.509. Version the order from a top "Serial version (VI;, V2;, V3;) of Number 
certificate "Issuer serial number of Number; certificate Subject the information on the issue 
office of Name; certificate", and "the term of validity of Validity; certificate""" "Public an 
users information which Name; certificate proves "Digital the information on Key; public key", 
and "Extensions; extension field" A Signature; digital signature (for a content alteration 
check)" is indicated." Among these, "Serial Number" and "Subject Name" are unique for 
every certifipate which an issue office defines. 

[0045] That is, in .this operation gestalt, when publishing a certificate, using the telephone 
number as ID, it is possible to use these "Serial Number", "Subject Name", or both as an 
identification ID (telephone number). 

[0046] next, him by the telephone number at the time of using the service with the need of 
specifying him, with reference to the drawing 9 and the drawing 10 — specialization is 
explained more concretely drawing 9 — the telephone number — him — drawing for 
explaining the authentication and **** at the time of specifying — it is — drawing 10 — the 
same — him of the telephone number — it is drawing for explaining conversion to specific 
data 

[0047] First, in case communication terminals, such as a users personal computer, access 
the broader-based computer networks 1, such as an internet network, by the cable or the 
radio with reference to drawing 9 , it is chosen with any of administrative body and public 
office, two sort communication entrepreneur (so-called *3jc********s, such as ISP (Internet 
Service Provider)), virtual shop, and financial relation engines (a card issuer, a bank, post 
office, etc.) it connects. [ as each service provider ] 

[0048] That is, when a user wants to enjoy shopping, a virtual shop is accessed at ISP, 
respectively, when it is going to perform an Internet connectivity at an administrative body 
and a public office, when it is going to perform banking and it is going to perform perusal and 
change of a residents information to a financial relation engine. At this time, all accesses are 
performed by the telephone number. 

[0049] For example, when it connects with the broader-based computer network 1 through 
the functioning telephone number management center and it buys as an authentication center 
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at a virtual shop using the so-called credit card t a virtual shop and a card issuer perform the 
authentication and the **** inquiry for specifying him to the telephone number management 
center which is an authentication vicarious execution service engine, using the telephone 
number as ID. In addition, NTT as a telephone number management center which can usually 
offer an authentication vicarious execution service, and other telephone entrepreneurs 
become an object. 

[0050] next, him who is data for specifying him in the telephone number management center 
with reference to drawing 10 — specific data and the identification ID data by the telephone 
number are made to correspond, and it is accumulating in the database As this he 
specialization data, his name and the address, the card number for every card issuer, the 
account number for every bank and post office, the license number of a license, the insurance 
certificate number for every policy, an e-mail address, and URL (home address) are 
accumulated. 

[0051] him who is accumulated from the inputted telephone number at a database — ; with 
reference to specific data, the account number is notified [ a license number and an 
insurance certificate number / an e-mail address and URL / his name and the address ] for a 
card number to a bank to a card issuer to a virtual shop to ISP to an administrative body or a 
public office, respectively 

[0052] Here, a telephone number management center notifies the pulling-down wording of a 
telegram and card number of the amount of money which bought the data applied to dispatch 
of goods, such as his name and the address, and the telephone number, to a virtual shop to 
the card issuer, and, thereby, ****s them. 

[0053] such him — specialization — him — a specific program is realized, and by computer, 
this program is recorded on the record medium which can be read, and is offered widely 
[0054] the following and him — a specific program is explained concretely 
[0055] (1) an arrival-of-the-mail device to the addresser telephone number which is a 
processing program on the computer installed between the arrival-of-the-mail devices (a 
dial-up router or host computer with a modem) which can receive the addresser telephone 
number connected with the digital certificate issue system at the public network, and can 
receive the addresser telephone number — receiving : — the addresser telephone number — 
an identification ID — carrying out — him — it is the program characterized by to ask a 
specific-information database and to control a series of transactions, such as an 
authentication success and a failure 

[0056] (2) It is a processing program on the computer installed between the arrival-of-the- 
mail devices (a dial-up router or host computer with a modem) which can receive the 
addresser telephone number connected with the digital certificate issue system at the public 
network, and ask a database, receiving the addresser telephone number from the arrival-of- 
the-mail device which can receive the addresser telephone number, and using the addresser 
telephone number as identification ID, and it is the program characterized by to perform the 
connection control to a broader-based computer network after the completion of 
authentication. 

[0057] (3) It is a processing program on the computer installed between the arrival-of-the- 
mail devices (a dial-up router or host computer with a modem) which can receive the 
addresser telephone number connected with the digital certificate issue system at the public 
network, and it is the program which receives the addresser telephone number from the 
arrival-ofHhe-mail device which can receive the addresser telephone number, sets the 
addresser telephone number to an identification ID, and is characterized by to control a series 
of transaction which asks a database and performs an issue demand to public-key digital 
certificate issue application. 

[0058] (4) a basis [ information / which relates the telephone number with the address or a 
host name, and was stored in the database ] — identification ID conversion of a broader- 
based computer network and a public network — carrying out — him — they are specific 
authentication and the program characterized by performing communications control 
[0059] (5) It is the program characterized by supervising the communication with the broader- 
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based computer network and public network by identification ID conversion, and accumulating 
communication data to buffering or external storage by the existence of telephone 
connection. 

[0060] As mentioned above, according to this operation gestalt, the compatibility and the 
fusion nature of a broader-based computer network and a public network from which the 
connection with the actual society which exists really in the information communication with 
a broader-based computer screen oversize and online is offered, and a communication 
procedure is different can be raised. 

[0061] That is, in the public key cryptosystem currently used in order to become, to manage a 
broader-based computer network and to prevent * ******** * , in case the owner of the public 
key used as a communicative subject and connection of a public key are guaranteed with a 
digital certificate, it is enabled to specify the owner of a public key as what exists in actual 
society. 

[0062] moreover, about the communication which needs to apply the encryption with a high 
intensity Although it must be able to attest and prove that a communications partner exists 
in actual society with a natural thing, even if it is in such a case It is enabled to perform 
authentication and proof on-line the convenience of a broader-based computer network, and • 
instancy taking advantage of a sex, without performing a prior presentation of the certificate 
which is valid in actual society, such as register copy and a license, about the information 
about the owner of a public key who proves with a digital certificate. 
[0063] Fusion of the public network which is the axle part on the communication which 
furthermore spreads to each home, and a broadei^based computer network is raised, and it . 
contributes to development of an information communication field. 
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DESCRIPTION OF DRAWINGS 

[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the configuration of the outline of a system in 
which this invention is applied. 

[Drawing 2] It is the block diagram showing the configuration of the outline of the 1 operation 
gestalt concerning this invention, 

[Drawing 3] It is a flow chart explaining the procedure in a supplementary program (1). 
[Drawing 4] It is a flow chart explaining the procedure in a supplementary program (2). 
[Drawing 5] It is a flow chart explaining the procedure in a supplementary program (3). 
[Drawing 6] It is a flow chart explaining the procedure in a supplementary program (4). 
[Drawing 7] It is a flow chart explaining the procedure in a supplementary program (5). 
[Drawing 8] It is drawing showing an example of a public-key digital certificate. 
[Drawing 9] the telephone number — him — it is drawing for explaining the authentication and 
**** at the time of specifying 

[Drawing 10] the telephone number — him — him of the telephone number at the time of 

specifying — it is drawing for explaining conversion to specific data 

[Description of Notations] 

1 Broader-based Computer Network 

3 Authentication Center 

5 Connection Control Section 

7 Public Network 

9 Communiciation. Terminal 

13 Authentication Center 

15 Host Computer with Modem (Dial-Up Router) 

1 9 Computer with Modem 

31 Telecommunications Control System 

33 He Specialization System 

35 Certificate Issue System 
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